路由器的网络地址转换、管理登陆限制、MAC与IP的绑定

interface FastEthernet0/0

ip address 10.1.5.130 255.255.255.252

ip access-group 102 in

ip access-group 105 out

ip nat outside

duplex auto

speed auto

!

interface FastEthernet0/1

ip address 158.88.0.254 255.255.0.0

ip access-group 102 in

ip nat inside

speed auto

full-duplex

!

ip nat pool globalpool 10.1.5.130 10.1.5.130 netmask 255.255.255.252

ip nat inside source list 1 pool globalpool overload

ip classless

ip route 0.0.0.0 0.0.0.0 10.1.5.129

no ip http server

ip pim bidir-enable

!

logging trap debugging

logging 158.88.0.224

logging 158.88.0.222

access-list 1 permit 158.88.0.222

access-list 1 permit 158.88.0.223

access-list 1 permit 158.88.0.224

access-list 1 permit 158.88.0.2

access-list 1 permit 158.88.0.1

access-list 1 permit 158.88.0.15

access-list 1 permit 158.88.0.18

access-list 1 permit 158.88.0.28

access-list 1 permit 158.88.0.48

access-list 102 permit tcp host 158.88.0.222 host 158.88.0.254 eq telnet

access-list 102 deny tcp any host 158.88.0.254 eq telnet

access-list 102 deny tcp any host 10.1.5.130 eq telnet

access-list 102 permit ip any any

arp 158.88.0.222 0002.3f70.4116 ARPA

arp 158.88.0.223 0004.2306.601d ARPA

arp 158.88.0.224 0050.ba7c.adcd ARPA

arp 158.88.0.224 0050.ba7c.adcd ARPA

arp 158.88.0.2 0001.0345.f79f ARPA

arp 158.88.0.1 0004.2306.6062 ARPA

arp 158.88.0.15 0004.2310.6aa0 ARPA

arp 158.88.0.18 0004.2306.6078 ARPA

arp 158.88.0.28 0004.2307.2a82 ARPA

arp 158.88.0.48 0004.2306.d10d ARPA

!

line con 0

password 7 120F0A1F1B0F09142B

line 33 48

line aux 0

password 7 07192E44470D1C1516

line vty 0 4

password 7 120F0A1F1B0F09142B